This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json) Hash identifier: noRNk8HhgZj3YP04EaGjf2a0TZNL3iNSRJnPmelLLrg= Subject key identifier: EF:F2:87:9C:91:08:28:54:9F:89:15:F0:B9:91:EC:AA:71:BA:33:3C Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Certificate serial: 019AF2ADCDD2C96DF6512CDB249BA2B25685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft Manifest number: 0A42 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: DYFmv5SEYYlddrISWWXVdY1hSCw.roa (hash: TKf7tOlhVLq0cOqQ0nNkYPFgdP68RF3GWaqOQkMnAHw=) 2: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: yij/XQpc1H7Z+RdVVzvY1zUudorP7CORDs5ijkTdj+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cd:d2:c9:6d:f6:51:2c:db:24:9b:a2:b2:56:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=eff2879c910828549f8915f0b991ecaa71ba333c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:44:5d:7e:4a:26:df:92:70:97:b5:4c:37: 76:91:15:cb:80:f0:0e:b0:98:f9:1a:a5:64:e1:e2: 59:85:a8:23:f1:41:1f:4b:74:cb:e1:64:01:07:9a: d3:e7:44:ba:56:af:bb:14:f6:de:af:97:8d:63:28: 07:4a:62:91:70:78:be:2d:a1:c9:53:ed:b5:d9:97: ce:21:70:76:5b:ce:98:02:31:67:74:22:8f:79:43: fd:18:11:5d:65:f1:7a:a5:c7:30:ea:0c:09:dd:0f: da:b3:e0:d4:fa:6d:ef:2a:64:a2:b5:34:48:55:80: 3e:22:ef:cb:1d:17:98:f1:20:47:d3:bf:a0:0b:5e: df:55:4b:e2:25:1f:2b:24:a1:c9:e4:1e:d5:55:5c: 9e:fd:d3:7d:7b:d1:c7:85:a7:ff:c8:ae:9a:e5:cc: 7c:be:53:39:61:2d:b6:b2:4b:0f:4b:97:83:58:20: e4:67:0c:9d:a7:c6:4e:de:e2:41:fa:6e:a3:fb:15: 6c:26:2b:ea:1e:e7:11:be:5f:f8:0e:7f:9d:65:b5: e9:99:54:ce:2d:22:fb:4a:84:cd:98:91:24:a8:26: 4d:7b:51:af:ac:c1:2b:8e:98:19:f7:18:2d:83:17: 83:b9:8e:d5:48:2d:78:ac:07:be:87:9a:7e:8a:64: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F2:87:9C:91:08:28:54:9F:89:15:F0:B9:91:EC:AA:71:BA:33:3C X509v3 Authority Key Identifier: keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3c:ed:b2:d5:6b:fd:09:57:49:ec:fe:1f:89:be:0e:8d:58: e3:c3:5a:8f:ea:92:0d:ce:7d:ce:07:df:51:ef:c6:fa:e9:5d: 8e:fc:1e:bd:92:a3:5a:eb:90:23:3e:f1:ae:48:b8:74:d6:07: 15:5e:9e:e5:e7:98:42:65:5c:30:d4:94:19:67:8e:ec:de:dd: 91:ca:32:13:39:4a:47:46:78:7f:b9:96:78:db:a7:26:59:ab: 5f:3b:31:2b:65:8c:c2:9c:d5:fd:5b:14:a1:06:23:78:fe:56: 07:f9:ab:2f:f5:b0:7c:b4:f1:1f:6b:80:f0:bb:63:6e:17:08: 02:29:2f:75:03:d4:89:f9:9f:0d:73:34:82:fa:76:7e:1c:65: ef:ec:c5:ff:3f:0a:37:e5:f0:db:b5:47:e7:9a:96:31:7b:71: 70:f5:8e:d9:24:51:7c:2e:36:97:b2:41:54:b8:7a:d1:3c:64: 51:e5:a7:83:8c:78:15:ea:da:6f:89:7d:9e:ca:58:67:17:17: b2:8d:58:0d:f5:e7:65:39:7b:d7:05:bf:61:82:93:cf:33:c2: ad:5a:96:23:ef:f1:fd:12:fd:a6:85:2a:ec:8e:eb:09:19:01: 62:0f:39:54:a3:3d:4e:8d:7a:ac:02:4c:5f:89:6b:3d:80:d8: 77:1c:01:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc3SyW32USzbJJuislaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx MWE2ODEwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EyhlZmYyODc5YzkxMDgyODU0OWY4OTE1ZjBiOTkxZWNhYTcxYmEzMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl79EXX5KJt+ScJe1TDd2kRXLgPAO sJj5GqVk4eJZhagj8UEfS3TL4WQBB5rT50S6Vq+7FPber5eNYygHSmKRcHi+LaHJ U+212ZfOIXB2W86YAjFndCKPeUP9GBFdZfF6pccw6gwJ3Q/as+DU+m3vKmSitTRI VYA+Iu/LHReY8SBH07+gC17fVUviJR8rJKHJ5B7VVVye/dN9e9HHhaf/yK6a5cx8 vlM5YS22sksPS5eDWCDkZwydp8ZO3uJB+m6j+xVsJivqHucRvl/4Dn+dZbXpmVTO LSL7SoTNmJEkqCZNe1GvrMErjpgZ9xgtgxeDuY7VSC14rAe+h5p+imR6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/yh5yRCChUn4kV8LmR7KpxujM8MB8GA1UdIwQY MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1 LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTztstVr /QlXSez+H4m+Do1Y48Naj+qSDc59zgffUe/G+uldjvwevZKjWuuQIz7xrki4dNYH FV6e5eeYQmVcMNSUGWeO7N7dkcoyEzlKR0Z4f7mWeNunJlmrXzsxK2WMwpzV/VsU oQYjeP5WB/mrL/WwfLTxH2uA8LtjbhcIAikvdQPUifmfDXM0gvp2fhxl7+zF/z8K N+Xw27VH55qWMXtxcPWO2SRRfC42l7JBVLh60TxkUeWng4x4Ferab4l9nspYZxcX so1YDfXnZTl71wW/YYKTzzPCrVqWI+/x/RL9poUq7I7rCRkBYg85VKM9To16rAJM X4lrPYDYdxwBVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:54 2025 by rpki-client